OpenConsole.exe Used as LOLBIN
Detects the execution of 'OpenConsole.exe' when it is not launched from the legitimate Windows Terminal path. This behavior is often indicative of an adversary attempting to use 'OpenConsole.exe' as a Living Off The Land Binary (LOLBIN) to bypass application whitelisting and execute other binaries.
Sigma
